96c406f4b1746022eaae0ffe3f73ed5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96c406f4b1746022eaae0ffe3f73ed5d_JaffaCakes118
Size

65KB
MD5

96c406f4b1746022eaae0ffe3f73ed5d
SHA1

e91fcc7ac3e0ba19672b710aeec472c9b8c03e8a
SHA256

c29894e0e4529c68387b69b6c6f8a33c9b622eae469db206b86e3194704fc461
SHA512

42327641ded7a045df6957306d6e00c3668afd641e29683eea651d12aa3fea05ee38b0d408ebd7d9027ff3ce3b24509bf098ab2a91281f260527b87c42a00619
SSDEEP

1536:Rsxrk9VGHfjTbVS45+JxlB0XSFQI5M4e7TTf8hrzM:RdVGHfjTbrQl7furerI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c406f4b1746022eaae0ffe3f73ed5d_JaffaCakes118

Files

96c406f4b1746022eaae0ffe3f73ed5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

964cdbff2b054a6f851642a404e41cdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA

gdi32

CreatePenIndirect
SetBkMode
CreateDIBSection
BitBlt
GetClipBox
GetDIBColorTable

user32

FillRect
IsChild
IsMenu
EnumWindows
EnumThreadWindows
GetMenu
EnumChildWindows
LoadIconA
EqualRect
CharNextA

kernel32

LoadLibraryA
GetLastError
VirtualAlloc
GetCurrentProcessId

Exports

Exports

oElPz6Mr

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ